Windows - RDP Enabled
Summary
This role is detected on any agent where RDP is enabled.
Settings
| Detection String | Comparator | Result | Applicable OS |
|---|---|---|---|
| {%@powershell "(Get-ItemProperty -Path 'HKLM://System//CurrentControlSet//Control//Terminal Server' -name 'fDenyTSConnections').fDenyTSConnections"@%} | Equals | 0 | Windows |
Changelog
2025-04-10
- Initial version of the document